WE CLAIM: 

1 , A method for multiplying an elliptic curve point Q(x,y) by a scalar to provide a point kQ, 
the method comprising the steps of: 

5 a) selecting an elliptic curve over a finite field F such that there exists an endomoiphism 

ij/ where y(Q) -X.Q for all points Q(x,y) on the elliptic curve, and A is an integer, 

b) estabhshing a representation of said scalar k as a combination of components k\ and 
said integer A 

c) combining said representation and said point Q to form a composite representation of 
10 a multiple coiresponding to kQ and 

d) computing a value corresponding to said point kQ firom said composite 
representation of kQ. 

2, A method according to claim 1 wherein each of said components ki is shorter than said 
=0 scalar k, 

f I 3. A method according to claim 1 wherein said components ki are initially selected and 
O subsequently combined to provide said scalar k. 

UJ 4, A method according to claim 1 wherein said representation is of the form 

L . 

O *f = X^^' ^ where n is the number of points on the elliptic curve, 

l^l 5 . A method according to claim 4 wherein said representation is of the form ko + ki . 
S 6* A method according to claim 1 wherein said scalar k has a predetermined value and said 
^~ components k* 

7, A method according to claim 3 wherein said value of said multiple kQ is calculated using 
simultaneous multiple addition. 

8. A method accord[ing to claim 7 wherein grouped temis Gr utilized in said simultaneous 
25 multiple addition are precomputed. 
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9. A method according to claim 6 wherein said components ki are obtained by obtaining 
short basis vectors (Uc, m) of the field F, designating a vector v as (k,0), converting v 
from a standard, orthonomal basis to the (iio*Ui) basis, to obtain fractionsyo/i 
representative of the vector v, applying said fractions to k to obtain a vector calculating 
an efficient equivalent v' to (he vector v and using components of the vector v in the 
composite representation of kQ. 

10, A method of generating in an elliptic curve cryptosystem a key pair having a integer k 
providing a private key and a public key kQ, where Q is a point on the curve, 

a) selecting an elliptic curve over a finite field F such that there exists an 

endomorphism vj; where v|;(Q) = XQ for all points Q (x,y) on the elliptic cmve, X is 
an integer, 

h) establishing a representation of said key k as a combination of components kj and 
said integer K 

c) combining said r^resentation and said point Q to form a composite 
representation of a multiple corresponding to the public key kQ and 

d) computing a value corresponding to said key kQ from said composite 
representation of kQ. 

11. A method according to claun 1 0 including a method according to any one of claims 2 to 
9. 

12, A method of computing a coordinate of a point kP on an elliptic curve resulting fi-om a 
point multiplication of an initial point P by a scalar k, said method comprising the steps 
of: 

a) decomposing said scalar k into a pair of components ko, ki for point multiplication to 
obtain respective points on said curve which when combined provide said poiut kP; 

b) detemdning a signed representation in non-adjacent form of each of said first and second 
components; 

c) generating a table having a plurality of signed bit combinations contained in said 
representations and corresponding point multiples of said combinations to provide 
portions of said respective points; 
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d) establishing for each of said representations a window having a width less then the length 
of each of said representations; 

e) initiating a sequential examination of said representations by said windows to obtain a 
position for one of said windows in one of said representations containing a respective 

5 one of said combinations in said table; 

f) retrieving from said table the one of said point multiples corresponding to said respective 
one of said signed bit combinations in said table to obtain therefrom one of said portions; 

g) accumulating said portion and continuing examination of said representations with a 
doubling of said accumulator for each bit-wise ahift of said windows to obtain a 

1 0 representation of said coordinate of said point kP in said accumulator. 

13. A method according to claim 12, wherein one of said respective points is derived from 
said initial point P and one of said components using an endomorphism of said curve. 
3 14. A method according to cl^ 13, wherein said portions of said one of said respective 
fi points are derived from portions of the other of said respective points using said 

endomorphism. 

r;: 1 5. A method accordmg to claim 1 2, wherein one of said respective points is derived from 
W said initial point Pj one of said components, and a private key. 

f 5: 16. A method according to claim 1 5, wherein said portions of said respective points are 
precomputed and stored in said table. 
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